@xiashe/cli 0.1.33 → 0.1.35-superconnector.2

package/README.md

@@ -57,4 +57,91 @@ Production defaults:
 
 An Agent must never add `--confirm` before the user has explicitly agreed to the displayed purpose. If the wallet is unavailable, obtain permission before running the official `@alipay/agent-payment` setup, then run `payment doctor` again.
 
-For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.33 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, the host injects `XIASHE_HOST_BUSINESS_SESSION` only into the supplied payment command’s foreground child process and runs the command exactly as supplied. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.
+For a clean Codex Task, the XiaShe MCP response provides a version-pinned ephemeral command such as `npx -y @xiashe/cli@0.1.34 payment bridge-info`. No global `xiashe` installation is required for that path. Do not run preflight before requesting payment confirmation: it is a read-only diagnostic only. After explicit confirmation, ordinary hosts inject `XIASHE_HOST_BUSINESS_SESSION` only into the supplied payment command’s foreground child process. Codex Node REPL uses the private MCP response’s stdin-only adapter because its spawned child does not inherit request metadata. The Agent must inspect bridge JSON instead of suppressing output or guessing status from shell text. Failed attempts include a redacted `diagnosis` object and `userVisible` next step; do not replace them with a generic payment-failed message.
+
+## Superconnector runtime preview
+
+The `0.1.35-superconnector.2` prerelease includes:
+
+- `connectors providers|list|requests|actions|grants`, `connect`, `reconnect`, `disconnect`, and scoped grants. Use `--permissions` with the IDs returned by `connectors providers`.
+- `runtime install|release|releases|publish` for immutable reviewed Registry artifacts.
+- `runtime run` for foreground Docker scripts and `runtime mcp` for a current Agent's stdio MCP session.
+- `runtime hosts|start|host|host-mcp` for explicitly targeted existing Agent connections.
+- `runtime retry-results|retry-host-results` for result delivery only; these commands never rerun business actions.
+- `runs list|show|cancel` for execution state, results and cancellation.
+
+Run `xiashe --help` for flags. Sign in through the existing XiaShe profile; never pass SaaS API keys or OAuth app secrets as command-line arguments. Platform configuration and the matching additive backend release are required. Script execution needs Docker and an immutable official Node image already present locally.
+
+The repository includes an isolated local backend, simulated provider and end-to-end scripts documented in `docs/superconnector-development.md`. This prerelease has not been published to npm or deployed to production.
+
+Hybrid runtime versions use one reviewed package for both entrypoints. `runtime mcp` selects Agent execution, `runtime run` selects script execution, and targeted `runtime start` requires `--mode agent` or `--mode script` for a hybrid version. A request key cannot be reused with a different mode.
+
+`runtime publish ... --signature-file proof.json` optionally imports a public BYOA v1 P-256 envelope. Supply only the public proof for the exact filtered delivery package. The CLI does not generate or import private publisher keys. Verified signatures remain subject to existing creator authorization and runtime/Red review.
+
+For complete version history, use `runtime releases <registry-entry-id> --limit 20` and repeat with `--cursor <continueCursor>` until `isDone`. Without pagination flags the legacy array response remains capped at 100.
+
+After restoring an owning account’s private outbox, `runtime retry-results --outbox-dir <restored-root>` retries saved receipts only. Preserve the matching execution claim records and keep the original worker offline; this command does not restart tasks.
+
+`connectors grant-public --actions hackernews.get_top_stories,hackernews.get_item --purpose "Read public headlines" --release <id>` approves reviewed public reads without binding a SaaS account. Only explicitly enabled public actions work; this does not allow direct script networking.
+
+## Non-OAuth connections and reusable Skill preparation
+
+For operator-enabled providers, inspect the gateway's required fields before creating a private JSON file:
+
+```bash
+xiashe connectors credential-setup firecrawl
+# Create credentials.json with the returned field names; keep it outside Skill packages and Git.
+chmod 600 credentials.json
+xiashe connectors connect-credentials firecrawl --auth-type api_key --credential-file credentials.json --request-key <unique-request-key>
+xiashe connectors credential-status <unique-request-key>
+```
+
+The file contains only the field-value object. Use `custom_credential` for providers requiring multiple fields. Values travel through the authenticated credential HTTP endpoint to OpenConnector; they are not runtime inputs. Delete the local file after successful binding when it is no longer needed. If a submission has an unknown outcome, check its status and ask the operator to reconcile it; do not generate another request key to retry.
+
+To replace a key, add `--replace <connection-id>` with a new request key. This pauses the old account and invalidates old approvals. Successful replacement creates a new connection and removes the old gateway credential; select and approve the new account for subsequent runs.
+
+```bash
+xiashe runtime prepare <release-id>
+xiashe runtime hosts
+xiashe runtime launch <release-id> --config-file launch.json --host <host-id> --request-key <unique-run-key>
+```
+
+`prepare` shows the reviewed requirements and still-valid saved choices without granting access. After the user confirms, `launch.json` may contain `input`, `connections`, `publicActionIds`, `creatorServiceIds`, and `executionMode`. Each connection entry contains `connectionId` and its current `revision`; consult the preparation response for the exact identifiers. Include no SaaS credentials. A hybrid release requires an explicit `agent` or `script` mode. Launch performs permission checks, scoped approval and queueing atomically; it remembers declared parameters and valid account choices only for this user and exact release. Every subsequent run still requires confirmation.
+
+
+## Quick SaaS setup (preview .2)
+
+Web and iOS creator analytics offer a three-step setup for a single Agent-mode action:
+choose the action/account source, define scope and call limits, then confirm review.
+The uploaded package and creator services are saved atomically. Store listing remains
+separate. Multi-action contracts, scripts and complex schemas use advanced Web setup.
+Drafts survive step changes and connection handoff while the editor stays mounted;
+closing the app or reloading the page does not provide durable draft storage.
+
+CLI users can scaffold the same configuration without logging in:
+
+```bash
+xiashe runtime init --action firecrawl.credit_usage_get --account-source creator --out runtime-setup.json
+# Review/edit against the deployed schema: choose your connection, disclosure,
+# fixed resources, allowed output fields and explicitly approved call limits.
+xiashe runtime publish-config <registry-entry-id> --artifact <artifact-id> --version 1.0.1 --config-file runtime-setup.json --confirm
+xiashe runtime doctor --mcp-url https://actions.projectphenix.site/mcp/xiashe
+```
+
+`consumer` and `public` templates omit creator services. Public actions must also be
+explicitly enabled by the operator. Templates contain no credentials; incomplete
+creator templates cannot be submitted unchanged. The same version and content can
+safely retry an uncertain save. Changing the content requires a new version; it
+never resets usage on the old version. Call limits are not a SaaS monetary budget.
+
+Release order after staging acceptance (publisher runs these commands):
+
+```bash
+(cd packages/xiashe-sdk && npm publish --access public --tag superconnector)
+(cd packages/xiashe-cli && npm publish --access public --tag superconnector)
+(cd packages/agentpie-cli && npm publish --access public --tag superconnector)
+```
+
+All three packages use `0.1.35-superconnector.2`. Deploy the matching additive
+backend before publishing packages. Keep `latest` unchanged. Rollback points users
+to the previous prerelease; do not overwrite immutable versions or delete run data.

package/bin/xiashe.mjs

@@ -2,7 +2,7 @@
 
 import { createHash } from 'node:crypto';
 import { existsSync } from 'node:fs';
-import { readdir, readFile, stat } from 'node:fs/promises';
+import { readdir, readFile, stat, writeFile } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 
@@ -19,8 +19,18 @@ try {
 
 const {
   VERSION,
+  probeRuntimeGateway,
+  runtimeSetupTemplate,
   DEFAULTS,
   XiasheClient,
+  installRuntimePackage,
+  retryRuntimeResults,
+  runRuntimeScript,
+  serveRuntimeScriptHost,
+  retryRuntimeHostResults,
+  createRuntimeAgentSession,
+  createRuntimeAgentHost,
+  serveRuntimeMcp,
   configPath,
   readConfig,
   updateProfile,
@@ -57,6 +67,8 @@ const PRODUCT_ENV = COMMAND_NAME === 'agentpie' ? 'global' : 'cn';
 // local state, stdout, or a model-visible command argument.
 const PAYMENT_HOST_CONTRACT_VERSION = 'xiashe.payment-host.v1';
 const PAYMENT_HOST_SESSION_ENV = 'XIASHE_HOST_BUSINESS_SESSION';
+const PAYMENT_HOST_STDIN_FLAG = 'host-session-stdin';
+const PAYMENT_HOST_STDIN_MAX_BYTES = 256;
 // These are compatibility adapters for known OpenAI/Codex hosts while their
 // runtimes adopt the portable environment contract. Unknown host variables
 // are deliberately not guessed: other Agents must inject the standard name.
@@ -79,6 +91,41 @@ Usage:
   ${c} config path|get|set <key> <value>|use <profile>
 
   ${c} connections list
+  ${c} runtime prepare <release-id>
+  ${c} runtime doctor --mcp-url <https-url>  (read-only; no login or SaaS calls)
+  ${c} runtime init --action <provider.action> --account-source creator|consumer|public --out <json-file>
+  ${c} runtime publish-config <registry-entry-id> --artifact <id> --version <version> --config-file <json-file> --confirm
+  ${c} runtime launch <release-id> --config-file <json> --host <host-id> --request-key <key>
+  ${c} connectors providers|list|requests|actions|grants
+  ${c} connectors describe <action-id>
+  ${c} connectors connect <provider> [--permissions repo,workflow] [--request-key <key>]
+  ${c} connectors credential-setup <provider>
+  ${c} connectors connect-credentials <provider> --auth-type api_key|custom_credential --credential-file <private-json> --request-key <key> [--replace <connection-id>]
+  ${c} connectors credential-status <request-key>
+  ${c} connectors reconnect <connection-id> [--permissions repo,workflow] [--request-key <key>]
+  ${c} connectors poll|cancel-auth <request-id>
+  ${c} connectors disconnect <connection-id>
+  ${c} connectors grant <connection-id> --actions <action,...> --purpose <text> [--duration once|day|month]
+  ${c} connectors grant-public --actions <action,...> --purpose <text> [--release <release-id>]
+  ${c} connectors grant-service <service-id> --release <release-id> --actions <action> --purpose <text>
+  ${c} connectors revoke <grant-id>
+  ${c} connectors execute <action> --grant <id> --request-key <key> [--input-file <json-file>]
+  ${c} runs list|show|cancel [run-id]
+  ${c} runtime install <release-id> [--cache-dir <path>]
+  ${c} runtime retry-results [--outbox-dir <restored-directory>]
+  ${c} runtime hosts
+  ${c} runtime host-mcp
+  ${c} runtime start <release-id> --host <host-id> --grants <grant-ids> --request-key <key> [--mode agent|script]
+  ${c} runtime host --image node@sha256:... [--once]
+  ${c} runtime retry-host-results
+  ${c} runtime run <release-id> --request-key <key> --image node@sha256:<digest> [--grants <ids>] [--input-file <json-file>]
+  ${c} runtime mcp <release-id> --request-key <key> [--grants <ids>] [--input-file <json-file>]
+  ${c} runtime services <release-id>
+  ${c} runtime service-create <release-id> --config-file <json-file>
+  ${c} runtime service-revoke <service-id>
+  ${c} runtime release <release-id>
+  ${c} runtime releases <registry-entry-id> [--limit <1-50>] [--cursor <cursor>]
+  ${c} runtime publish <registry-entry-id> --artifact <id> --version <version> --contract-file <json-file> [--signature-file <json-file>]
   ${c} claw pair --connection <id-or-name>
   ${c} claw repair --connection <id-or-name>
   ${c} claw check --connection <id-or-name>
@@ -278,13 +325,51 @@ function hostSessionContractStatus(resolution = null) {
   };
 }
 
-function resolvePaymentBusinessSession(flags) {
+async function readPaymentBusinessSessionFromStdin() {
+  return await new Promise((resolve) => {
+    let received = '';
+    let settled = false;
+    const finish = (value = null) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timeout);
+      process.stdin.pause();
+      resolve(value);
+    };
+    const timeout = setTimeout(() => finish(null), 5_000);
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (chunk) => {
+      received += chunk;
+      if (Buffer.byteLength(received, 'utf8') > PAYMENT_HOST_STDIN_MAX_BYTES) {
+        finish(null);
+      }
+    });
+    process.stdin.once('end', () => finish(received.trim()));
+    process.stdin.once('error', () => finish(null));
+    process.stdin.resume();
+  });
+}
+
+async function resolvePaymentBusinessSession(flags) {
   // A model-visible command-line session is not an acceptable trust boundary.
   // Hosts that cannot inject the standard environment must implement the v1
   // adapter rather than asking a user or model to provide a replacement.
   if (flags['session-id'] !== undefined || flags.sessionId !== undefined) {
     return { error: 'host_session_override_forbidden' };
   }
+  if (flags[PAYMENT_HOST_STDIN_FLAG] !== undefined) {
+    if (flags[PAYMENT_HOST_STDIN_FLAG] !== true) {
+      return { error: 'host_session_override_forbidden' };
+    }
+    const candidate = await readPaymentBusinessSessionFromStdin();
+    if (HOST_BUSINESS_SESSION_PATTERN.test(String(candidate || '').trim())) {
+      return {
+        sessionId: String(candidate).trim(),
+        provider: 'codex_node_repl_request_metadata'
+      };
+    }
+    return null;
+  }
   const standardCandidate = String(process.env[PAYMENT_HOST_SESSION_ENV] || '').trim();
   if (HOST_BUSINESS_SESSION_PATTERN.test(standardCandidate)) {
     return {
@@ -320,8 +405,8 @@ function hostBusinessSessionUnavailableResult() {
   };
 }
 
-function hostBusinessSessionOverrideForbiddenResult() {
-  const hostResolution = resolvePaymentBusinessSession({});
+async function hostBusinessSessionOverrideForbiddenResult() {
+  const hostResolution = await resolvePaymentBusinessSession({});
   return {
     ok: false,
     status: 'host_session_override_forbidden',
@@ -537,6 +622,182 @@ async function cmdConnections(sub, _args, global) {
   ]);
 }
 
+async function cmdConnectors(sub, args, global) {
+  const flags = parseFlags(args);
+  const { client } = await makeClient(global);
+  const id = () => requireArg(flags._[0], 'id');
+  let result;
+  if (!sub || sub === 'list') result = await client.listSaasConnections();
+  else if (sub === 'providers') result = await client.listSaasProviders();
+  else if (sub === 'actions') result = await client.listConnectorActions();
+  else if (sub === 'describe') {
+    result = await client.getConnectorActionDefinition(id());
+  }
+  else if (sub === 'grants') result = await client.listConnectorGrants();
+  else if (sub === 'requests') result = await client.listSaasAuthorizationRequests();
+  else if (sub === 'credential-setup') result = await client.getSaasCredentialSetup(id());
+  else if (sub === 'credential-status') result = await client.getSaasCredentialStatus(id());
+  else if (sub === 'connect-credentials') {
+    if (!flags['credential-file'] || !flags['request-key'] || !['api_key', 'custom_credential'].includes(flags['auth-type']))
+      fail('Require --credential-file, --request-key and --auth-type api_key|custom_credential. Never pass secrets as command arguments.', EXIT_USAGE);
+    const filename = path.resolve(String(flags['credential-file']));
+    const info = await stat(filename);
+    if (!info.isFile() || info.size > 32768 || process.platform !== 'win32' && (info.mode & 0o077))
+      fail('Use a private JSON file of at most 32KB (chmod 600 on Unix).', EXIT_USAGE);
+    let values;
+    try { values = JSON.parse(await readFile(filename, 'utf8')); } catch { fail('Credential file must contain valid JSON.', EXIT_USAGE); }
+    result = await client.connectSaasCredentials(id(), { authType: flags['auth-type'], values, requestKey: flags['request-key'], replaceConnectionId: flags.replace });
+  }
+  else if (sub === 'connect') result = await client.connectSaas(id(), flags['request-key'] || createIdempotencyKey(), { authorizationOptionIds: flags.permissions ? String(flags.permissions).split(',').filter(Boolean) : [] });
+  else if (sub === 'reconnect') result = await client.reauthorizeSaas(id(), { requestKey: flags['request-key'] || createIdempotencyKey(), authorizationOptionIds: flags.permissions ? String(flags.permissions).split(',').filter(Boolean) : [] });
+  else if (sub === 'poll') result = await client.pollSaasAuthorization(id());
+  else if (sub === 'cancel-auth') result = await client.cancelSaasAuthorization(id());
+  else if (sub === 'disconnect') result = await client.disconnectSaas(id());
+  else if (sub === 'revoke') result = await client.revokeConnectorGrant(id());
+  else if (sub === 'grant' || sub === 'grant-public' || sub === 'grant-service') result = await client.grantConnector({ ...(sub === 'grant-public' ? { publicAccess: true } : sub === 'grant-service' ? { creatorServiceId: id() } : { connectionId: id() }),
+    actionIds: String(requireValue('--actions', flags.actions)).split(',').map(value => value.trim()).filter(Boolean),
+    purpose: requireValue('--purpose', flags.purpose), duration: flags.duration || 'once', ...(flags.release ? { releaseId: String(flags.release) } : {}) });
+  else if (sub === 'execute') {
+    let input = {};
+    if (flags['input-file']) {
+      const filename = path.resolve(String(flags['input-file']));
+      if ((await stat(filename)).size > 32768) fail('Input must be at most 32KB.', EXIT_USAGE);
+      input = JSON.parse(await readFile(filename, 'utf8'));
+    }
+    result = await client.executeConnector({ actionId: id(), input,
+      grantId: requireValue('--grant', flags.grant), requestKey: requireValue('--request-key', flags['request-key']) });
+  } else fail(`Unknown connectors command: ${sub}`, EXIT_USAGE);
+  print(result ?? { ok: true }, global);
+}
+
+async function cmdRuns(sub, args, global) {
+  const { client } = await makeClient(global);
+  if (!sub || sub === 'list') return print(await client.listSkillRuns(), global);
+  const id = requireArg(args[0], 'run-id');
+  if (sub === 'show') return print(await client.getSkillRun(id), global);
+  if (sub === 'cancel') return print(await client.cancelSkillRun(id) ?? { ok: true }, global);
+  fail(`Unknown runs command: ${sub}`, EXIT_USAGE);
+}
+
+async function cmdRuntime(sub, args, global) {
+  const flags = parseFlags(args);
+  if (sub === 'doctor') { const report = await probeRuntimeGateway(requireValue('--mcp-url', flags['mcp-url'])); print(report, global); if (!report.ok) process.exitCode = EXIT_RUNTIME; return; }
+  if (sub === 'init') {
+    const template = runtimeSetupTemplate(requireValue('--action', flags.action), requireValue('--account-source', flags['account-source']));
+    const file = path.resolve(String(requireValue('--out', flags.out)));
+    await writeFile(file, JSON.stringify(template, null, 2) + '\n', { flag: 'wx', mode: 0o600 });
+    return print({ file, nextStep: 'Inspect the deployed action with connectors describe; complete scope, outputs and limits. Never put SaaS keys in this file. Then use runtime publish-config --confirm; this submits for review, not execution.' }, global);
+  }
+  const { client } = await makeClient(global);
+  if (sub === 'publish-config') {
+    if (flags.confirm !== true) fail('Review account source, outputs and additional usage, then pass --confirm. No action has been executed.', EXIT_USAGE);
+    const file = path.resolve(String(requireValue('--config-file', flags['config-file'])));
+    if ((await stat(file)).size > 240000) fail('Setup file must be at most 240KB.', EXIT_USAGE);
+    const config = JSON.parse(await readFile(file, 'utf8'));
+    if (!['consumer', 'creator', 'public'].includes(config.accountSource) || !Array.isArray(config.services) || !Array.isArray(config.contract?.actionIds) || config.contract.actionIds.length !== 1 ||
+      (config.accountSource === 'creator' ? config.services.length !== 1 || config.services[0].actionId !== config.contract.actionIds[0] : config.services.length !== 0)) fail('Use a one-action setup from runtime init. Creator services must cover that action.', EXIT_USAGE);
+    const releaseId = await client.createConfiguredRuntimeRelease({ registryEntryId: requireArg(flags._[0], 'registry-entry-id'), artifactId: requireValue('--artifact', flags.artifact), version: requireValue('--version', flags.version), accountSource: config.accountSource, contract: config.contract, services: config.services });
+    return print({ releaseId, nextStep: 'Saved atomically for package verification and runtime review. Check runtime release <id>. Store listing remains separate. Retry a lost response with exactly the same version and configuration.' }, global);
+  }
+  if (sub === 'retry-results') return print(await retryRuntimeResults(client, flags['outbox-dir'] ? { outboxRoot: path.resolve(String(flags['outbox-dir'])) } : {}), global);
+  if (sub === 'hosts') return print(await client.listRuntimeHosts(), global);
+  if (sub === 'retry-host-results') return print(await retryRuntimeHostResults(client,
+    flags['outbox-dir'] ? { outboxRoot: path.resolve(String(flags['outbox-dir'])) } : {}), global);
+  if (sub === 'host-mcp') {
+    const controller = new AbortController();
+    const stop = () => controller.abort();
+    process.once('SIGINT', stop); process.once('SIGTERM', stop);
+    try {
+      const host = await createRuntimeAgentHost(client, {
+        ...(flags['state-dir'] ? { stateRoot: path.resolve(String(flags['state-dir'])) } : {}),
+        ...(flags['outbox-dir'] ? { outboxRoot: path.resolve(String(flags['outbox-dir'])) } : {}),
+      });
+      await serveRuntimeMcp(host, { signal: controller.signal });
+    } finally { process.removeListener('SIGINT', stop); process.removeListener('SIGTERM', stop); }
+    return;
+  }
+  if (sub === 'host') {
+    const controller = new AbortController();
+    const stop = () => controller.abort();
+    process.once('SIGINT', stop); process.once('SIGTERM', stop);
+    try {
+      return print(await serveRuntimeScriptHost(client, { image: requireValue('--image', flags.image), once: flags.once === true },
+        { signal: controller.signal,
+          ...(flags['state-dir'] ? { stateRoot: path.resolve(String(flags['state-dir'])) } : {}),
+          ...(flags['outbox-dir'] ? { outboxRoot: path.resolve(String(flags['outbox-dir'])) } : {}),
+          onEvent: event => process.stderr.write(JSON.stringify(event) + '\n') }), global);
+    } finally { process.removeListener('SIGINT', stop); process.removeListener('SIGTERM', stop); }
+  }
+  const id = requireArg(flags._[0], 'release or registry entry id');
+  if (sub === 'prepare') return print(await client.prepareRuntimeRun(id), global);
+  if (sub === 'launch') {
+    const filename = path.resolve(String(requireValue('--config-file', flags['config-file'])));
+    if ((await stat(filename)).size > 32768) fail('Launch config must be at most 32KB.', EXIT_USAGE);
+    const config = JSON.parse(await readFile(filename, 'utf8'));
+    return print({ runId: await client.launchRuntimeRun({ ...config, releaseId: id, requestKey: requireValue('--request-key', flags['request-key']), targetAgentConnectionId: requireValue('--host', flags.host) }) }, global);
+  }
+  if (sub === 'services') return print(await client.listCreatorServices(id), global);
+  if (sub === 'service-revoke') return print(await client.revokeCreatorService(id) ?? { ok: true }, global);
+  if (sub === 'service-create') {
+    const filename = path.resolve(String(requireValue('--config-file', flags['config-file'])));
+    if ((await stat(filename)).size > 32768) fail('Service config must be at most 32KB.', EXIT_USAGE);
+    const config = JSON.parse(await readFile(filename, 'utf8'));
+    return print({ serviceId: await client.createCreatorService({ ...config, releaseId: id }) }, global);
+  }
+  if (sub === 'run' || sub === 'mcp' || sub === 'start') {
+    let input = {};
+    if (flags['input-file']) {
+      const filename = path.resolve(String(flags['input-file']));
+      if ((await stat(filename)).size > 32768) fail('Input must be at most 32KB.', EXIT_USAGE);
+      input = JSON.parse(await readFile(filename, 'utf8'));
+    }
+    if (sub === 'start') return print({ runId: await client.startRuntimeRun({ releaseId: id, input,
+      grantIds: flags.grants ? String(flags.grants).split(',').filter(Boolean) : [],
+      requestKey: requireValue('--request-key', flags['request-key']), targetAgentConnectionId: requireValue('--host', flags.host), ...(flags.mode ? { executionMode: String(flags.mode) } : {}) }) }, global);
+    const controller = new AbortController();
+    const stop = () => controller.abort();
+    process.once('SIGINT', stop); process.once('SIGTERM', stop);
+    try {
+      if (sub === 'mcp') {
+        const session = await createRuntimeAgentSession(client, { releaseId: id, input,
+          grantIds: flags.grants ? String(flags.grants).split(',').filter(Boolean) : [], requestKey: requireValue('--request-key', flags['request-key']) },
+        { ...(flags['state-dir'] ? { stateRoot: path.resolve(String(flags['state-dir'])) } : {}), ...(flags['outbox-dir'] ? { outboxRoot: path.resolve(String(flags['outbox-dir'])) } : {}) });
+        await serveRuntimeMcp(session, { signal: controller.signal });
+        return;
+      }
+      return print(await runRuntimeScript(client, { releaseId: id, input,
+        grantIds: flags.grants ? String(flags.grants).split(',').filter(Boolean) : [],
+        requestKey: requireValue('--request-key', flags['request-key']), image: requireValue('--image', flags.image) },
+      { signal: controller.signal }), global);
+    } finally { process.removeListener('SIGINT', stop); process.removeListener('SIGTERM', stop); }
+  }
+  if (sub === 'install') {
+    const installed = await installRuntimePackage(client, id, flags['cache-dir'] ? { cacheRoot: path.resolve(String(flags['cache-dir'])) } : {});
+    return print({ directory: installed.directory, releaseId: installed.release.id, version: installed.release.version,
+      artifactSha256: installed.release.artifactSha256, mode: installed.contract.mode, entry: installed.contract.entry }, global);
+  }
+  if (sub === 'release') return print(await client.getRuntimeRelease(id), global);
+  if (sub === 'releases') return print(flags.limit !== undefined || flags.cursor !== undefined
+    ? await client.listRuntimeReleasePage(id, { limit: Number(flags.limit ?? 20), cursor: flags.cursor === undefined ? null : String(flags.cursor) })
+    : await client.listRuntimeReleases(id), global);
+  if (sub === 'publish') {
+    const filename = path.resolve(String(requireValue('--contract-file', flags['contract-file'])));
+    if ((await stat(filename)).size > 32768) fail('Contract must be at most 32KB.', EXIT_USAGE);
+    const contract = JSON.parse(await readFile(filename, 'utf8'));
+    let signature;
+    if (flags['signature-file']) {
+      const signatureFile = path.resolve(String(flags['signature-file']));
+      if ((await stat(signatureFile)).size > 200000) fail('Signature envelope must be at most 200KB.', EXIT_USAGE);
+      signature = JSON.parse(await readFile(signatureFile, 'utf8'));
+      const publicKey = JSON.parse(signature.publicJwk);
+      if (publicKey.d || signature.privateJwk || signature.privateKey) fail('Provide a public signature envelope without private keys.', EXIT_USAGE);
+    }
+    return print(await client.createRuntimeRelease({ registryEntryId: id, artifactId: requireValue('--artifact', flags.artifact),
+      version: requireValue('--version', flags.version), contract, signature }), global);
+  }
+  fail(`Unknown runtime command: ${sub}`, EXIT_USAGE);
+}
+
 async function cmdClaw(sub, args, global) {
   const flags = parseFlags(args);
   const { client } = await makeClient(global);
@@ -1270,7 +1531,7 @@ async function cmdPayment(sub, args, global) {
   const flags = parseFlags(args);
   if (sub === 'bridge-info' || sub === 'bridge' || sub === 'prepare') {
     const result = await getAlipayWalletBridgeInfo({ timeoutMs: global.timeoutMs });
-    const businessSession = resolvePaymentBusinessSession({});
+    const businessSession = await resolvePaymentBusinessSession({});
     print({
       ...result,
       hostSessionContract: hostSessionContractStatus(businessSession?.error ? null : businessSession)
@@ -1298,9 +1559,9 @@ async function cmdPayment(sub, args, global) {
   if (sub === 'pay') {
     const resourceUrl = requireArg(flags['resource-url'] || flags.resourceUrl || flags.r, '--resource-url');
     const intentSummary = requireArg(flags['intent-summary'] || flags.intentSummary || flags.i, '--intent-summary');
-    const businessSession = resolvePaymentBusinessSession(flags);
+    const businessSession = await resolvePaymentBusinessSession(flags);
     if (businessSession?.error === 'host_session_override_forbidden') {
-      print(hostBusinessSessionOverrideForbiddenResult(), global);
+      print(await hostBusinessSessionOverrideForbiddenResult(), global);
       process.exitCode = EXIT_RUNTIME;
       return;
     }
@@ -1561,6 +1822,9 @@ async function main() {
     if (command === 'whoami') return await cmdWhoami(global);
     if (command === 'logout') return await cmdLogout(global);
     if (command === 'connections' || command === 'connection') return await cmdConnections(sub, args, global);
+    if (command === 'connectors') return await cmdConnectors(sub, args, global);
+    if (command === 'runs') return await cmdRuns(sub, args, global);
+    if (command === 'runtime') return await cmdRuntime(sub, args, global);
     if (command === 'claw') return await cmdClaw(sub, args, global);
     if (command === 'skills' || command === 'skill') return await cmdSkills(sub, args, global);
     if (command === 'agent' || command === 'agents') return await cmdAgent(sub, args, global);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xiashe/cli",
-  "version": "0.1.33",
+  "version": "0.1.35-superconnector.2",
   "type": "module",
   "bin": {
     "xiashe": "bin/xiashe.mjs"
@@ -10,7 +10,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@xiashe/sdk": "0.1.33"
+    "@xiashe/sdk": "0.1.35-superconnector.2"
   },
   "engines": {
     "node": ">=20"